A retail company is adopting Salesforce (SaaS) for customer relationship management. The company's security team requires single sign-on (SSO) for all employees and multi-factor authentication (MFA). The company uses Azure Active Directory (Azure AD) for identity management. Which integration pattern should the company use?

Configure Salesforce to use Azure AD as an identity provider with SAML 2.0 and enforce MFA via Azure AD Conditional Access.

Use a custom API to sync passwords from Azure AD to Salesforce and rely on Salesforce's native MFA.

Use Salesforce's built-in identity provider and configure Azure AD to trust it.

Create a separate user account in Salesforce for each employee and use a shared password for MFA.

A company must store customer data in a specific country to comply with local regulations. Which cloud design decision directly addresses this requirement?

Selecting a cloud region within that country

Enabling multi-factor authentication

An AI/ML inference workload requires real-time responses for users in a specific region. Which placement is most appropriate?

Cloud region closest to the users

Centralized cloud region far from users

On-premises data center in another country

What is the primary role of Cisco Cloud OnRamp in a hybrid WAN?

Automating and optimizing connectivity to multiple cloud providers

Providing a SaaS application for email

Replacing the need for a firewall

What does 'data sovereignty' primarily refer to in a cloud/hybrid context?

The requirement that data is subject to the laws of the country where it is stored

The right of a cloud provider to access customer data

The ability to encrypt data with customer-managed keys

The ability to move data freely across borders without restrictions

CiscoCertified Design Expert (CCDE)

Domain 4Objective 2

4.2 Cloud/hybrid Solutions Based on Business-Critical Operations 400-007 Practice Questions (Page 4)

Part of the 4.0 Service Design domain, which accounts for 15% of the 400-007 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

17concepts

15%of the exam

17 Concepts in This Objective

Regulatory compliance frameworks
Compliance mapping to service architecture
Data sovereignty and residency
Data ownership and control
Data locale and jurisdictional issues
Service placement strategies
IaaS design considerations
PaaS design considerations
SaaS integration and management
Direct connect options
Cloud OnRamp and MPLS integration
WAN integration for cloud
Cloud security architecture
Security compliance in cloud
AI/ML workload placement
AI/ML infrastructure requirements
AI/ML governance and compliance

Questions 16–20

16application · medium
A retail company is adopting Salesforce (SaaS) for customer relationship management. The company's security team requires single sign-on (SSO) for all employees and multi-factor authentication (MFA). The company uses Azure Active Directory (Azure AD) for identity management. Which integration pattern should the company use?
Select an answer first
17foundation · easy
A company must store customer data in a specific country to comply with local regulations. Which cloud design decision directly addresses this requirement?
Select an answer first
18foundation · easy
An AI/ML inference workload requires real-time responses for users in a specific region. Which placement is most appropriate?
Select an answer first
19foundation · easy
What is the primary role of Cisco Cloud OnRamp in a hybrid WAN?
Select an answer first
20foundation · easy
What does 'data sovereignty' primarily refer to in a cloud/hybrid context?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 400-007

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “400-007” is a trademark of its owner, used for identification only.